Repository hardening and public-safe cleanup

Repository hardening release.

Changed:

• Replaced internal-looking example hostnames with public-safe example.com values.
• Added branch protection with required checks.
• Added required PSScriptAnalyzer and Gitleaks checks.

Security:

• GitHub secret scanning enabled.
• Push protection enabled.
• Main branch protected.